$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/295441ef-9281-31e4-889f-a1169db53868.roa File: 295441ef-9281-31e4-889f-a1169db53868.roa (raw, json) Hash identifier: ZSj4o46EPGj/rlKHsqWjjrXLZFiR9NHbFF62nvCPGVk= Subject key identifier: C4:EC:D0:1E:F2:0B:47:64:E1:56:59:24:45:C7:9A:BD:D6:D6:15:1E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D20AF64B6055E3433BF5CE380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/295441ef-9281-31e4-889f-a1169db53868.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 6167 IP address blocks: 174.216.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:64:b6:05:5e:34:33:bf:5c:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=5564e092-b5a6-48e9-8b46-fb91d1b4fc3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6d:ca:ff:f7:e8:ed:13:14:b3:e6:91:32:07: e1:68:14:49:9b:2a:14:4e:e8:e0:11:75:03:b3:be: fc:55:45:e5:88:fd:17:d8:1e:90:ea:a7:3b:83:f3: d8:3b:e1:d8:09:83:7b:27:73:22:8c:78:54:2b:d2: a9:0f:11:00:82:64:e5:ce:7b:97:ef:c1:d6:28:b2: 2c:a2:c6:75:eb:66:18:bd:83:99:41:57:83:47:8b: 69:19:40:ad:d6:82:31:0c:1d:23:8a:ab:2f:64:18: b6:64:6a:eb:30:04:01:80:81:12:2a:52:51:ad:63: 64:fb:1a:dc:e6:61:cb:56:c1:4f:e5:19:7f:9d:62: 62:14:d4:84:b0:46:ed:bc:bb:14:da:41:65:af:e5: f2:c4:c6:79:43:5b:c3:86:9f:c9:7c:fb:be:38:11: 2e:08:c3:30:97:87:56:9d:15:73:5f:eb:2d:3d:47: 0f:f9:d5:83:a0:84:8c:04:33:bd:00:ce:33:14:9b: 50:c8:28:fa:da:3a:d7:26:97:45:d6:0d:f5:c8:d3: 40:b2:83:27:cd:be:6a:56:b3:29:1f:20:c3:1b:f1: 3f:c3:f7:67:81:0f:db:5e:5c:09:13:0c:22:aa:37: 0c:db:b5:24:a8:de:63:e4:06:1d:14:61:f3:e3:ad: 33:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EC:D0:1E:F2:0B:47:64:E1:56:59:24:45:C7:9A:BD:D6:D6:15:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/295441ef-9281-31e4-889f-a1169db53868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.216.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:29:91:0d:b2:da:64:90:db:85:47:56:c0:ec:54:21:da:95: 82:f5:f9:e0:e9:68:18:49:f8:85:36:44:59:43:c9:9f:50:89: f3:ce:3a:93:9e:fb:b2:05:ea:46:ea:a2:81:b4:ee:28:fb:8a: f7:e3:06:d9:c0:da:d3:b8:ed:9f:55:af:ad:77:5c:2c:43:09: d3:df:f2:d4:64:34:d6:ef:c3:64:07:7f:d2:bc:a0:b6:98:87: e0:ce:9a:81:78:d6:ec:55:d8:6e:dd:db:a3:4d:9d:3f:fb:fb: 3c:c6:d0:b6:f5:62:15:69:23:e6:25:0c:f7:9e:9f:83:70:9f: 9d:f8:14:13:88:7c:26:4b:be:31:d2:b6:ca:1d:c0:7b:d9:39: 39:6c:44:dc:9e:3a:33:3c:61:19:fa:4f:b5:99:83:9b:c8:35: 99:cd:1f:ba:75:b7:b9:90:07:03:1e:df:67:16:a8:78:80:35: 6d:26:c1:e9:e8:4f:6a:19:68:b4:dc:e0:63:c5:d6:fb:30:34: 1a:85:ad:09:31:fe:da:39:d5:93:84:f7:cb:ba:f2:25:ec:dd: 10:34:e2:82:27:75:25:cb:3a:ad:00:32:d4:c9:be:cd:2b:68: 4e:c2:98:db:c5:8f:44:da:5b:dc:65:9f:93:a2:d9:d7:46:5c: 02:56:fa:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr2S2BV40M79c44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk NTU2NGUwOTItYjVhNi00OGU5LThiNDYtZmI5MWQxYjRmYzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG3K//fo7RMUs+aRMgfhaBRJmyoUTujgEXUD s778VUXliP0X2B6Q6qc7g/PYO+HYCYN7J3MijHhUK9KpDxEAgmTlznuX78HWKLIs osZ162YYvYOZQVeDR4tpGUCt1oIxDB0jiqsvZBi2ZGrrMAQBgIESKlJRrWNk+xrc 5mHLVsFP5Rl/nWJiFNSEsEbtvLsU2kFlr+XyxMZ5Q1vDhp/JfPu+OBEuCMMwl4dW nRVzX+stPUcP+dWDoISMBDO9AM4zFJtQyCj62jrXJpdF1g31yNNAsoMnzb5qVrMp HyDDG/E/w/dngQ/bXlwJEwwiqjcM27UkqN5j5AYdFGHz460zWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTs0B7yC0dk4VZZJEXHmr3W1hUeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjk1NDQxZWYtOTI4MS0z MWU0LTg4OWYtYTExNjlkYjUzODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtiwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8pkQ2y2mSQ24VHVsDsVCHalYL1+eDpaBhJ+IU2RFlDyZ9QifPOOpOe +7IF6kbqooG07ij7ivfjBtnA2tO47Z9Vr613XCxDCdPf8tRkNNbvw2QHf9K8oLaY h+DOmoF41uxV2G7d26NNnT/7+zzG0Lb1YhVpI+YlDPeen4Nwn534FBOIfCZLvjHS tsodwHvZOTlsRNyeOjM8YRn6T7WZg5vINZnNH7p1t7mQBwMe32cWqHiANW0mweno T2oZaLTc4GPF1vswNBqFrQkx/to51ZOE98u68iXs3RA04oIndSXLOq0AMtTJvs0r aE7CmNvFj0TaW9xln5Oi2ddGXAJW+oQ= -----END CERTIFICATE-----Generated at Thu Mar 26 19:48:45 2026 by rpki-client